This book covers the full life cycle of conducting a mobile and computer digital forensic examination, including planning and performing an investigation as well as report writing and testifying. Case reviews in corporate, civil, and criminal situations are also described from both prosecution and defense perspectives.

Digital Forensics Explained, Second Edition draws from years of experience in local, state, federal, and international environments and highlights the challenges inherent in deficient cyber security practices. Topics include the importance of following the scientific method and verification, legal and ethical issues, planning an investigation (including tools and techniques), incident response, case project management and authorization, social media and internet, cloud, anti-forensics, link and visual analysis, and psychological considerations.

The book is a valuable resource for the academic environment, law enforcement, those in the legal profession, and those working in the cyber security field. Case reviews include cyber security breaches, anti-forensic challenges, child exploitation, and social media investigations.


Greg Gogolin, PhD, CISSP, is a Professor of Information Security and Intelligence at Ferris State University and a licensed Professional Investigator. He has worked more than 100 cases in criminal, civil, and corporate environments.

chapter Chapter 2|23 pages

Digital forensic approaches and best practices

chapter Chapter 3|16 pages

Digital forensics tool kit

chapter Chapter 4|9 pages

Internet and e-mail examinations

chapter Chapter 5|17 pages

Mobile forensics

chapter Chapter 6|20 pages

Cloud computing and digital forensics

chapter Chapter 7|11 pages

Law enforcement incident response

chapter Chapter 8|17 pages

Report writing and presentation

chapter Chapter 9|18 pages

Social media forensics

chapter Chapter 10|15 pages

Social engineering forensics

chapter Chapter 11|16 pages

Anti-forensics *

chapter Chapter 12|9 pages

Link and visual analysis

chapter Chapter 14|13 pages

Someone is watching

chapter Chapter 15|10 pages

The realities of digital forensic practice